I got this today:
Spam detection software, running on the system "earth.securenet-server.net", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: [...]
Content analysis details: (18.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.2 EXTRA_MPART_TYPE Header has extraneous Content-type:...type= entry
3.2 MSGID_SPAM_LETTERS Spam tool Message-Id: (letters variant)
0.1 HTTP_ESCAPED_HOST URI: Uses %-escapes inside a URL's hostname
0.6 HTTP_EXCESSIVE_ESCAPES URI: Completely unnecessary %-escapes inside a URL
0.7 HTML_SHORT_LENGTH BODY: HTML is extremely short
1.4 DOMAIN_RATIO BODY: Message body mentions many internet domains
0.0 HTML_MESSAGE BODY: HTML included in message
1.5 MPART_ALT_DIFF BODY: HTML and text parts are different
1.2 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.2 HTML_90_100 BODY: Message is 90% to 100% HTML
3.1 HTML_IMAGE_ONLY_04 BODY: HTML: images with 0-400 bytes of words
0.6 URIBL_SBL Contains an URL listed in the SBL blocklist
[URIs: bokarkdjjbc.com]
2.0 URIBL_OB_SURBL Contains an URL listed in the OB SURBL blocklist
[URIs: bokarkdjjbc.com]
3.9 URIBL_SC_SURBL Contains an URL listed in the SC SURBL blocklist
[URIs: bokarkdjjbc.com]
0.0 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.